Legal

Cookie Policy

Last updated: 15 June 2026

Privacy PolicyTerms of ServiceCookie Policy

1. What are cookies

Cookies are small text files placed on your device by your browser when you visit a website. KoalaCast uses a minimal set of cookies — strictly necessary ones to keep the platform functioning, and optional analytics cookies to help us understand how the product is used so we can improve it.

We do not use advertising cookies, tracking pixels, or any cookies that follow you across other websites.

2. Legal basis for cookies

We operate under multiple privacy frameworks depending on where you are located:

  • European Union / EEA (GDPR & ePrivacy Directive): We obtain your explicit consent before setting any non-essential cookies. Strictly necessary cookies are set without consent under the legitimate interest basis as they are required for the service to function.
  • United Kingdom (UK GDPR & PECR): Same consent requirements as the EU apply. You may withdraw consent at any time.
  • United States (incl. California CCPA / CPRA): We do not sell or share personal information collected via cookies for cross-context behavioural advertising. Analytics data is used solely for internal product improvement.
  • India (DPDP Act 2023): We obtain your consent before processing any personal data via optional cookies. You may withdraw consent at any time by updating your cookie preferences.

3. Cookies we use

The following table lists every cookie KoalaCast sets:

Cookie namePurposeDurationType
sb-access-tokenKeeps you logged in to your workspace1 hourEssential
sb-refresh-tokenRefreshes your session without re-logging in60 daysEssential
sb-auth-tokenAuthenticates your identity on the serverSessionEssential
_gaGoogle Analytics — distinguishes unique visitors2 yearsAnalytics (optional)
_ga_*Google Analytics GA4 — maintains session state2 yearsAnalytics (optional)

That is the complete list. We do not use Facebook Pixel, advertising cookies, or any other third-party tracking scripts beyond Google Analytics.

4. Strictly necessary cookies

The three Supabase authentication cookies (sb-access-token, sb-refresh-token, sb-auth-token) are essential for KoalaCast to function. Without them you cannot log in, access your workspace, or use any feature of the platform. These cookies are set automatically when you log in and do not require your consent under applicable law.

5. Analytics cookies (Google Analytics)

We use Google Analytics 4 (GA4) to collect anonymised data about how visitors use KoalaCast — such as which pages are most visited, session duration, and general navigation patterns. This helps us improve the product.

Analytics cookies are only set after you give explicit consent via our cookie banner. If you decline, no analytics data is collected and Google Analytics is not activated on your device.

Key points about our GA4 usage:

  • IP addresses are anonymised by default in GA4.
  • We do not share analytics data with third parties for advertising purposes.
  • We do not enable Google Signals or cross-device tracking.
  • Data is processed by Google LLC under a Data Processing Agreement compliant with GDPR.
  • Google may transfer data to the United States under Standard Contractual Clauses (SCCs).

For more information on how Google handles data, see Google's Privacy Policy.

6. Your choices and consent

When you first visit KoalaCast you will see a cookie consent banner. You can:

  • Accept all cookies — enables both essential and analytics cookies.
  • Reject all — only essential cookies are set; GA is not activated.
  • Cookie settings — granularly choose which categories to allow and save your preferences.

Your preference is saved in your browser's local storage under the key koalacast_cookie_consent. You can change your preferences at any time by clearing this entry or by contacting us.

Withdrawing consent: To withdraw consent for analytics cookies, clear your cookie preferences in your browser or email us at hello@koalacast.io and we will provide instructions.

7. How to manage cookies in your browser

You can view, delete, and block cookies directly in your browser settings at any time. Note that clearing the KoalaCast authentication cookies will log you out of your workspace.

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Safari: Preferences → Privacy → Manage Website Data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Edge: Settings → Cookies and site permissions → Cookies

You can also opt out of Google Analytics across all websites using the Google Analytics Opt-out Browser Add-on.

8. Data retention

Analytics data in Google Analytics is retained for 14 months, after which it is automatically deleted. Essential session cookies expire as described in the table above.

9. Changes to this policy

We will update this policy if we introduce new cookies or change how existing ones work. Material changes will be notified to workspace administrators by email at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact & complaints

For any questions about our use of cookies: hello@koalacast.io

If you are in the EU/UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority — for example, the ICO (UK), CNIL (France), or the DPC (Ireland).

If you are in India and have a grievance related to data processing, you may contact us at the email above. We will respond within 72 hours.

© 2026 KoalaCast · hello@koalacast.io